Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1AE8EB2A7E9911F08378569DDAE4EC9C.roa
File: 1AE8EB2A7E9911F08378569DDAE4EC9C.roa (raw, json)
Hash identifier: 5GQ60PIZY5ykCQOYSxFxymPLZT1RbmZwtC2RvF1Wizc=
Subject key identifier: C3:E4:6F:73:2E:7A:16:8A:17:28:BF:38:76:CF:32:C7:BD:5A:0C:72
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 019393
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1AE8EB2A7E9911F08378569DDAE4EC9C.roa
Signing time: Thu 21 Aug 2025 14:14:10 +0000
ROA not before: Thu 21 Aug 2025 14:14:04 +0000
ROA not after: Wed 21 Aug 2030 14:14:04 +0000
asID: 17561
IP address blocks: 154.200.0.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103315 (0x19393)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 21 14:14:04 2025 GMT
Not After : Aug 21 14:14:04 2030 GMT
Subject: CN=68a729b2-d6d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e0:ac:75:ee:79:d8:68:3f:a3:61:91:6c:ec:
dc:45:32:fc:7d:ec:6d:28:ac:d3:6a:22:99:73:75:
6c:d8:b4:e9:a0:7f:67:f5:47:54:ec:00:4c:ad:64:
17:e2:c9:3f:3e:d6:9b:30:bb:ff:23:11:62:88:78:
b1:3a:dd:ab:38:b9:b0:a7:dd:0d:9c:78:ee:bc:88:
aa:61:18:0b:b7:7f:21:55:0e:cb:bb:90:fe:7a:67:
7a:7d:b6:8f:49:04:b2:56:66:66:cf:ba:f9:9c:dc:
5c:d9:72:08:cb:15:07:08:77:0f:fb:85:64:5f:9b:
57:ad:e1:16:bc:ef:e7:9c:d2:5d:c1:e1:95:cc:9c:
6f:56:dd:6d:c7:2b:1b:fe:51:70:8d:3f:80:14:f3:
e9:5b:52:f0:54:75:d1:9a:eb:2d:78:70:30:23:6a:
55:5f:22:e3:12:f9:76:ca:6b:a4:b6:39:49:42:b0:
c8:99:35:fc:4d:fb:ca:3b:90:c0:07:8f:be:3b:23:
36:c9:37:ed:9f:ae:8b:15:03:9b:c7:62:02:43:25:
47:0a:29:4f:da:b6:88:4f:0a:d1:0c:d0:a3:fd:8a:
a0:50:37:af:98:75:8f:2f:bc:aa:59:29:ac:f7:c5:
1d:19:20:eb:bf:95:1b:8a:e4:a4:07:f2:99:2a:c8:
93:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E4:6F:73:2E:7A:16:8A:17:28:BF:38:76:CF:32:C7:BD:5A:0C:72
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1AE8EB2A7E9911F08378569DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.0.0/17
Signature Algorithm: sha256WithRSAEncryption
81:90:c0:ef:85:47:d0:0d:1f:c9:fc:db:f7:31:bc:40:0d:31:
00:08:21:2b:e1:f2:cd:5d:9e:46:b8:e5:b1:fb:0d:c3:08:4d:
28:d4:ae:fe:58:d5:6b:a0:1e:ff:ca:ff:2e:37:55:dc:92:8f:
08:6d:df:b3:64:f2:a3:95:ed:7f:3b:c5:ba:e1:cd:e0:fe:89:
16:f2:eb:e4:db:a6:93:eb:b5:9a:b2:04:f8:63:3d:23:55:10:
5e:d6:bb:0e:6c:c0:fb:b1:aa:e8:f1:48:1b:12:a9:df:10:4e:
a7:af:f0:d6:51:6f:48:ec:ab:45:59:b4:b2:6c:a3:60:95:af:
7a:ef:39:82:dd:05:8f:38:ef:30:58:27:c8:45:ab:0e:3c:9a:
59:e1:b1:15:9e:3e:d7:8d:6d:11:cb:b0:e2:80:1d:43:67:35:
12:e6:05:8e:08:9a:8d:69:3b:11:f8:19:93:ad:b8:74:e1:3f:
66:85:69:29:c9:bc:d1:dd:96:b9:2d:be:ec:12:74:91:20:0f:
c5:5b:eb:95:c6:44:73:bd:7f:a8:27:b4:00:86:20:47:4c:c1:
90:07:0f:aa:fd:07:27:e2:4b:e3:6a:2f:18:ef:f4:63:0c:23:
1c:95:ac:d7:68:2a:f3:21:81:5f:22:2a:1f:9a:f9:57:99:42:
ce:7d:82:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:24:39 2025 by rpki-client